# Vulnerabilities published in 2026


- [CVE-2026-18064](https://insights.sbomify.com/CVE-2026-18064/): NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference (high 8.2)
- [CVE-2026-18063](https://insights.sbomify.com/CVE-2026-18063/): Job Postings <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position_button' Parameter (medium 6.4)
- [CVE-2026-18062](https://insights.sbomify.com/CVE-2026-18062/): Cross-site scripting in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor (medium 6.4)
- [CVE-2026-18061](https://insights.sbomify.com/CVE-2026-18061/): Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin (medium 6.0)
- [CVE-2026-1806](https://insights.sbomify.com/CVE-2026-1806/): Cross-site scripting in Tour & Activity Operator Plugin for TourCMS (medium 6.4)
- [CVE-2026-18059](https://insights.sbomify.com/CVE-2026-18059/): Information disclosure in PixelYourSite Pro – Your smart PIXEL (TAG) Manager (medium 5.3)
- [CVE-2026-18058](https://insights.sbomify.com/CVE-2026-18058/): Missing authorization in Smart Connect Application (high 7.3)
- [CVE-2026-18057](https://insights.sbomify.com/CVE-2026-18057/): Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection (high 8.1)
- [CVE-2026-18056](https://insights.sbomify.com/CVE-2026-18056/): Auth bypass in HivePress Authentication (high 7.5)
- [CVE-2026-18052](https://insights.sbomify.com/CVE-2026-18052/): ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters (high 8.1)
- [CVE-2026-18051](https://insights.sbomify.com/CVE-2026-18051/): Path traversal in W3 Total Cache (critical 10.0)
- [CVE-2026-18050](https://insights.sbomify.com/CVE-2026-18050/): Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads (high 7.5)
- [CVE-2026-1805](https://insights.sbomify.com/CVE-2026-1805/): Cross-site scripting in DA Media GigList (medium 6.4)
- [CVE-2026-18049](https://insights.sbomify.com/CVE-2026-18049/): WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo (high 7.5)
- [CVE-2026-18048](https://insights.sbomify.com/CVE-2026-18048/): WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal (high 7.5)
- [CVE-2026-18047](https://insights.sbomify.com/CVE-2026-18047/): Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash (medium 6.5)
- [CVE-2026-18046](https://insights.sbomify.com/CVE-2026-18046/): Cookie Consent < 0.0.10 - Subscriber+ MaxMind License Key Update (medium 4.3)
- [CVE-2026-18044](https://insights.sbomify.com/CVE-2026-18044/): Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch (low 3.7)
- [CVE-2026-18042](https://insights.sbomify.com/CVE-2026-18042/): WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation (medium 5.3)
- [CVE-2026-18040](https://insights.sbomify.com/CVE-2026-18040/): HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler (medium 5.9)
- [CVE-2026-1804](https://insights.sbomify.com/CVE-2026-1804/): Cross-site scripting in WDES Responsive Popup (medium 6.4)
- [CVE-2026-18039](https://insights.sbomify.com/CVE-2026-18039/): Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment (high 8.1)
- [CVE-2026-18038](https://insights.sbomify.com/CVE-2026-18038/): nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure (medium 5.3)
- [CVE-2026-18037](https://insights.sbomify.com/CVE-2026-18037/): Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication (medium 6.5)
- [CVE-2026-18036](https://insights.sbomify.com/CVE-2026-18036/): NTRU leaks private key information by reducing secret values with a non-constant-time integer division (high 8.2)
- [CVE-2026-18035](https://insights.sbomify.com/CVE-2026-18035/): User Access Manager < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST API (medium 5.3)
- [CVE-2026-18032](https://insights.sbomify.com/CVE-2026-18032/): WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass (high 7.5)
- [CVE-2026-18031](https://insights.sbomify.com/CVE-2026-18031/): TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback (critical 9.8)
- [CVE-2026-18030](https://insights.sbomify.com/CVE-2026-18030/): Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms (high 8.1)
- [CVE-2026-1803](https://insights.sbomify.com/CVE-2026-1803/): Ziroom ZHOME A0101 Dropbear SSH Service default credentials (critical 9.2)
- [CVE-2026-18029](https://insights.sbomify.com/CVE-2026-18029/): Insufficient validation of payment status in pretix-girosolution (medium 6.3)
- [CVE-2026-18028](https://insights.sbomify.com/CVE-2026-18028/): Missing authorization check in event quick setup view (low 2.3)
- [CVE-2026-18027](https://insights.sbomify.com/CVE-2026-18027/): Path traversal in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels (medium 6.5)
- [CVE-2026-18024](https://insights.sbomify.com/CVE-2026-18024/): PostgreSQL ascii() function reads past end of buffer (medium 4.3)
- [CVE-2026-18023](https://insights.sbomify.com/CVE-2026-18023/): Information disclosure in Armoury Crate (medium 5.7)
- [CVE-2026-18022](https://insights.sbomify.com/CVE-2026-18022/): pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems (high 8.8)
- [CVE-2026-18021](https://insights.sbomify.com/CVE-2026-18021/): Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution (medium 6.5)
- [CVE-2026-18020](https://insights.sbomify.com/CVE-2026-18020/): IBM i is Affected By Multiple Vulnerabilities in NetServer (medium 5.3)
- [CVE-2026-1802](https://insights.sbomify.com/CVE-2026-1802/): Ziroom ZHOME A0101 zrMacClone.lua macAddrClone command injection (medium 6.9)
- [CVE-2026-18019](https://insights.sbomify.com/CVE-2026-18019/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-18018](https://insights.sbomify.com/CVE-2026-18018/): Other in Chrome (medium 4.0)
- [CVE-2026-18017](https://insights.sbomify.com/CVE-2026-18017/): Use after free in Chrome (high 8.8)
- [CVE-2026-18016](https://insights.sbomify.com/CVE-2026-18016/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-18015](https://insights.sbomify.com/CVE-2026-18015/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-18014](https://insights.sbomify.com/CVE-2026-18014/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-18013](https://insights.sbomify.com/CVE-2026-18013/): Other in Chrome (medium 4.3)
- [CVE-2026-18012](https://insights.sbomify.com/CVE-2026-18012/): Use after free in Chrome (high 8.8)
- [CVE-2026-18011](https://insights.sbomify.com/CVE-2026-18011/): Information disclosure in Chrome (low 2.4)
- [CVE-2026-18010](https://insights.sbomify.com/CVE-2026-18010/): Other in Chrome (medium 4.3)
- [CVE-2026-1801](https://insights.sbomify.com/CVE-2026-1801/): Libsoup: libsoup: http request smuggling via malformed chunk headers (medium 5.3)
- [CVE-2026-18009](https://insights.sbomify.com/CVE-2026-18009/): Other in Chrome (medium 4.3)
- [CVE-2026-18008](https://insights.sbomify.com/CVE-2026-18008/): Other in Chrome (medium 4.3)
- [CVE-2026-18007](https://insights.sbomify.com/CVE-2026-18007/): Other in Chrome (medium 4.3)
- [CVE-2026-18006](https://insights.sbomify.com/CVE-2026-18006/): Other in Chrome (medium 4.3)
- [CVE-2026-18005](https://insights.sbomify.com/CVE-2026-18005/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-18004](https://insights.sbomify.com/CVE-2026-18004/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-18003](https://insights.sbomify.com/CVE-2026-18003/): Other in Chrome (medium 4.3)
- [CVE-2026-18002](https://insights.sbomify.com/CVE-2026-18002/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-18001](https://insights.sbomify.com/CVE-2026-18001/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-18000](https://insights.sbomify.com/CVE-2026-18000/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-1800](https://insights.sbomify.com/CVE-2026-1800/): Fonts Manager | Custom Fonts <= 1.2 - Unauthenticated SQL Injection via fmcfIdSelectedFnt parameter (high 7.5)
- [CVE-2026-17999](https://insights.sbomify.com/CVE-2026-17999/): Race condition in Chrome (medium 6.5)
- [CVE-2026-17998](https://insights.sbomify.com/CVE-2026-17998/): Other in Chrome (medium 4.3)
- [CVE-2026-17997](https://insights.sbomify.com/CVE-2026-17997/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-17996](https://insights.sbomify.com/CVE-2026-17996/): Security feature bypass in Chrome (medium 6.2)
- [CVE-2026-17995](https://insights.sbomify.com/CVE-2026-17995/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-17994](https://insights.sbomify.com/CVE-2026-17994/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17993](https://insights.sbomify.com/CVE-2026-17993/): Race condition in Chrome (high 7.0)
- [CVE-2026-17992](https://insights.sbomify.com/CVE-2026-17992/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-17991](https://insights.sbomify.com/CVE-2026-17991/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17990](https://insights.sbomify.com/CVE-2026-17990/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17989](https://insights.sbomify.com/CVE-2026-17989/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-17988](https://insights.sbomify.com/CVE-2026-17988/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17987](https://insights.sbomify.com/CVE-2026-17987/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17986](https://insights.sbomify.com/CVE-2026-17986/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17985](https://insights.sbomify.com/CVE-2026-17985/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17984](https://insights.sbomify.com/CVE-2026-17984/): Security feature bypass in Chrome (low 3.3)
- [CVE-2026-17983](https://insights.sbomify.com/CVE-2026-17983/): Other in Chrome (medium 4.3)
- [CVE-2026-17982](https://insights.sbomify.com/CVE-2026-17982/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17981](https://insights.sbomify.com/CVE-2026-17981/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17980](https://insights.sbomify.com/CVE-2026-17980/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-17979](https://insights.sbomify.com/CVE-2026-17979/): Race condition in Chrome (high 7.5)
- [CVE-2026-17978](https://insights.sbomify.com/CVE-2026-17978/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-17977](https://insights.sbomify.com/CVE-2026-17977/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17976](https://insights.sbomify.com/CVE-2026-17976/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17975](https://insights.sbomify.com/CVE-2026-17975/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-17974](https://insights.sbomify.com/CVE-2026-17974/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17973](https://insights.sbomify.com/CVE-2026-17973/): Information disclosure in Chrome (medium 5.5)
- [CVE-2026-17972](https://insights.sbomify.com/CVE-2026-17972/): Other in Chrome (medium 4.3)
- [CVE-2026-17971](https://insights.sbomify.com/CVE-2026-17971/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-17970](https://insights.sbomify.com/CVE-2026-17970/): Other in Chrome (medium 4.3)
- [CVE-2026-1797](https://insights.sbomify.com/CVE-2026-1797/): Truebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views Files (medium 5.3)
- [CVE-2026-17969](https://insights.sbomify.com/CVE-2026-17969/): Privilege escalation in Chrome (high 8.8)
- [CVE-2026-17968](https://insights.sbomify.com/CVE-2026-17968/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-17967](https://insights.sbomify.com/CVE-2026-17967/): Use after free in Chrome (high 8.8)
- [CVE-2026-17966](https://insights.sbomify.com/CVE-2026-17966/): Information disclosure in Chrome (medium 6.2)
- [CVE-2026-17965](https://insights.sbomify.com/CVE-2026-17965/): Other in Chrome (medium 4.3)
- [CVE-2026-17964](https://insights.sbomify.com/CVE-2026-17964/): Other in Chrome (medium 4.3)
- [CVE-2026-17963](https://insights.sbomify.com/CVE-2026-17963/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17962](https://insights.sbomify.com/CVE-2026-17962/): Cross-site scripting in Chrome (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/836/